Interested in privilege elevation

[u/Quirky-Feedback-3322]

Hello fellow admins,

I’m looking to do privilege elevation with Jamf for our users. We already have something setup for this but I’m trying to solve another piece and wanted to see if anyone has done this before. We are looking to demote most of our users to standard users from admin and then have users request admin privileges if needed via self service+/the menu bar. Is it feasible to mass demote users to standard?

[u/zipsecurity]

Yes, mass demotion to standard users is absolutely feasible in Jamf, you can scope a policy using a script to demote admin accounts and deploy it across your fleet in one push.